This is an automated email from the ASF dual-hosted git repository.
madhan pushed a change to branch RANGER-3923
in repository https://gitbox.apache.org/repos/asf/ranger.git
from 2038f9235 RANGER-4475: updated getZoneSummary() API to make all
security-zones available for users with Ranger admin role
add 7dd8dc884 RANGER-4475: updated getZoneSummary() API to make all
security-zones available for users with Ranger admin role
add 494fc2e44 RANGER-4477: RangerOzoneAuthorizer doesn't set the resource
owner
add 1725cdbb5 RANGER-4472: getResourceACLs() handling of tags associated
with resource and its desencent - #2
add f1d9da40c RANGER-4474: adventures in abac - part-2
new 811c0ece1 Merge branch 'master' into RANGER-3923
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../plugin/contextenricher/RangerTagEnricher.java | 2 +-
.../plugin/policyengine/PolicyEvaluatorForTag.java | 16 ++
.../policyengine/RangerPolicyEngineImpl.java | 44 +--
.../policyengine/RangerPolicyRepository.java | 11 +-
.../RangerPolicyResourceMatcher.java | 45 +++
.../plugin/contextenricher/TestTagEnricher.java | 23 ++
.../plugin/policyengine/TestPolicyEngine.java | 7 +
.../policyengine/resource_hierarchy_tags.json | 91 ++----
.../test_aclprovider_resource_hierarchy_tags.json | 76 +++--
.../test_policyengine_resource_hierarchy_tags.json | 239 ++++++++++++++++
...olicy_globalsalespartners_row_filter_sr_sp.jpg} | Bin
...-policy_globalsalespartners_row_filter_abac.jpg | Bin 0 -> 331255 bytes
.../fig3-policy_tag_based_on_user_role.jpg | Bin 0 -> 294345 bytes
.../fig4-policy_tag_policy_abac.jpg | Bin 0 -> 271364 bytes
.../table_globalsalespartners.jpg | Bin
.../site/resources/blogs/adventures_in_abac_2.html | 312 +++++++++++++++++++++
docs/src/site/xdoc/blogs.xml | 10 +
.../ozone/authorizer/RangerOzoneAuthorizer.java | 2 +
18 files changed, 751 insertions(+), 127 deletions(-)
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_resource_hierarchy_tags.json
copy
docs/src/site/resources/blogs/{adventures_in_abac_1.files/fig11-policy_globalsalespartners_row_filter_sr_sp.jpg
=>
adventures_in_abac_2.files/fig1-policy_globalsalespartners_row_filter_sr_sp.jpg}
(100%)
create mode 100644
docs/src/site/resources/blogs/adventures_in_abac_2.files/fig2-policy_globalsalespartners_row_filter_abac.jpg
create mode 100644
docs/src/site/resources/blogs/adventures_in_abac_2.files/fig3-policy_tag_based_on_user_role.jpg
create mode 100644
docs/src/site/resources/blogs/adventures_in_abac_2.files/fig4-policy_tag_policy_abac.jpg
copy docs/src/site/resources/blogs/{adventures_in_abac_1.files =>
adventures_in_abac_2.files}/table_globalsalespartners.jpg (100%)
create mode 100644 docs/src/site/resources/blogs/adventures_in_abac_2.html
